$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa File: ba0ac163-ead6-4734-882a-290485728bb4.roa (raw, json) Hash identifier: 5xdUEu9WgaLAs7i0S3+7FuQlm3Mrn4G65m7vZXP30fU= Subject key identifier: F0:B1:16:EA:E4:13:A8:4F:49:62:7C:7E:51:57:BB:09:19:09:4A:F5 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5CF555E79E8A31FA5480B4AF412BEF908948A850 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa Signing time: Fri 28 Mar 2025 15:40:51 +0000 ROA not before: Fri 28 Mar 2025 15:40:51 +0000 ROA not after: Fri 02 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1ff7:1040::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f5:55:e7:9e:8a:31:fa:54:80:b4:af:41:2b:ef:90:89:48:a8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Mar 28 15:40:51 2025 GMT Not After : May 2 23:59:59 2025 GMT Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:19:b8:a9:db:5d:24:b0:43:d5:0e:b0:39: d2:52:f1:9e:78:fd:79:7d:40:f9:55:70:2b:51:2a: 6a:6f:7a:8d:6c:a3:c8:77:26:35:da:af:ac:43:72: a4:6b:75:19:51:69:7b:fb:9d:ef:b4:01:ff:c4:85: da:e3:bd:a4:18:69:71:85:46:0b:0f:f0:31:c0:f0: e9:29:45:60:62:b7:76:92:e0:4f:49:61:d7:dd:80: eb:b9:2d:81:e9:10:a5:5a:fe:4c:ec:9c:ea:93:cc: 08:7f:b8:48:dd:a0:4f:4f:a6:84:b6:be:7b:aa:79: 97:41:cc:d0:c4:7e:59:fb:7f:4f:ac:5b:b4:9e:99: 4f:75:4b:26:0c:d7:be:9f:3b:96:f1:4f:6a:82:99: 0d:f2:0e:ef:cb:a2:1b:8c:f9:51:f4:27:f1:d8:7e: 10:cf:3a:5d:e0:3c:a9:ad:c1:36:b4:74:b9:3a:6d: 6c:e1:9d:cf:39:60:33:dd:7c:ae:a5:79:bc:3a:f7: a2:47:d8:0f:72:d2:a2:ae:44:a6:29:43:93:af:c4: fa:d4:1b:ff:e4:82:af:f8:f1:db:3c:ec:99:b7:95: bc:1a:a0:e5:ce:b4:46:d2:09:90:cf:3c:4e:5f:46: c0:06:48:af:f0:f2:81:76:50:9e:3f:2e:fb:1c:0b: ca:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B1:16:EA:E4:13:A8:4F:49:62:7C:7E:51:57:BB:09:19:09:4A:F5 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ac163-ead6-4734-882a-290485728bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1ff7:1040::/46 Signature Algorithm: sha256WithRSAEncryption b9:52:b7:69:7a:90:96:2d:96:9a:c9:3d:0f:eb:9a:b0:58:dd: 41:98:72:33:9e:9a:6a:e0:e5:d5:fd:dd:ad:ff:ea:65:76:26: d8:2a:b4:21:51:00:ca:f7:c5:f4:c3:17:2e:5f:c4:d2:62:e7: c1:78:72:28:0c:e4:6f:17:1f:26:ad:2d:e2:cb:fe:b8:f7:7b: 31:d8:b6:89:4e:b8:70:1d:69:f5:fa:a7:cf:71:fe:23:47:1b: a1:1d:25:b8:0f:f6:39:a9:06:9b:1c:9d:45:14:88:32:7a:43: e5:20:de:e5:4b:3a:0d:1d:e4:96:f8:21:2b:6a:fa:fe:3f:7a: 97:85:8f:d2:5f:1e:89:d3:e0:3c:c4:7c:b7:75:b1:60:d3:7b: 20:5d:55:c2:dc:34:68:40:2c:b2:26:57:e3:53:33:39:a7:36: 90:e9:33:ea:c7:38:29:fc:cc:1c:df:9e:8d:29:ca:56:b9:e1: d4:ae:03:26:41:09:4a:a5:e3:65:c2:47:92:b4:99:96:fa:dd: 34:88:bf:f4:a4:70:21:1c:2e:82:10:b3:d4:a0:48:2a:8f:45: bc:f0:1b:0d:6e:f2:8e:25:13:c0:ed:2e:2e:ea:7c:aa:2f:d7: 30:94:77:e3:35:44:b0:76:70:55:e0:bd:b2:49:65:70:77:da: 65:93:2f:a2 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXPVV556KMfpUgLSvQSvvkIlIqFAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMzI4MTU0MDUxWhcNMjUwNTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTQzYjk3NmI5NzU4NjY5NTdlOWFmNTMyZDk1MzMzZTYz MjJlZDNjOWYzYTU0MmVmMWMyZWE4YzBlYTBiNTQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSNxm4qdtdJLBD1Q6wOdJS8Z54/Xl9QPlVcCtRKmpveo1s o8h3JjXar6xDcqRrdRlRaXv7ne+0Af/EhdrjvaQYaXGFRgsP8DHA8OkpRWBit3aS 4E9JYdfdgOu5LYHpEKVa/kzsnOqTzAh/uEjdoE9PpoS2vnuqeZdBzNDEfln7f0+s W7SemU91SyYM176fO5bxT2qCmQ3yDu/LohuM+VH0J/HYfhDPOl3gPKmtwTa0dLk6 bWzhnc85YDPdfK6lebw696JH2A9y0qKuRKYpQ5OvxPrUG//kgq/48ds87Jm3lbwa oOXOtEbSCZDPPE5fRsAGSK/w8oF2UJ4/LvscC8pXAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU8LEW6uQTqE9JYnx+UVe7CRkJSvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhMGFjMTYzLWVhZDYtNDczNC04ODJhLTI5MDQ4NTcyOGJiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwImAB/3EEAwDQYJKoZIhvcNAQELBQADggEBALlSt2l6kJYtlprJPQ/rmrBY 3UGYcjOemmrg5dX93a3/6mV2JtgqtCFRAMr3xfTDFy5fxNJi58F4cigM5G8XHyat LeLL/rj3ezHYtolOuHAdafX6p89x/iNHG6EdJbgP9jmpBpscnUUUiDJ6Q+Ug3uVL Og0d5Jb4IStq+v4/epeFj9JfHonT4DzEfLd1sWDTeyBdVcLcNGhALLImV+NTMzmn NpDpM+rHOCn8zBzfno0pyla54dSuAyZBCUql42XCR5K0mZb63TSIv/SkcCEcLoIQ s9SgSCqPRbzwGw1u8o4lE8DtLi7qfKov1zCUd+M1RLB2cFXgvbJJZXB32mWTL6I= -----END CERTIFICATE-----Generated at Sun Apr 6 00:31:04 2025 by rpki-client